Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to information disclosure.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/106159 | Third Party Advisory VDB Entry |
| https://helpx.adobe.com/security/products/acrobat/apsb18-41.html | Patch Vendor Advisory |
| https://pdf-insecurity.org/signature/evaluation_2018.html | Third Party Advisory |
| https://pdf-insecurity.org/signature/signature.html | Third Party Advisory |
| https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
No history.
Information
Published : 2019-01-18 17:29
Updated : 2024-02-04 20:03
NVD link : CVE-2018-16042
Mitre link : CVE-2018-16042
CVE.ORG link : CVE-2018-16042
JSON object : View
Products Affected
microsoft
- windows
apple
- mac_os_x
adobe
- acrobat_dc
- acrobat_reader_dc
- reader
iskysoft
- pdf_editor_6
- pdfelement6
linux
- linux_kernel
CWE
CWE-347
Improper Verification of Cryptographic Signature